CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- themegoods capellaWordPress Capella theme <= 2.5.5 - SQL Injection vulnerability9.3 Critical
- edge themes shuffleWordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability8.1 High
- anders norén chaplinWordPress Chaplin theme <= 2.6.8 - Broken Access Control vulnerability7.5 High
internmentcrates.io`internment` 0.8.7 was removed from crates.io due to a malicious dependencyNo scoreproc-macro1crates.io`proc-macro1` was removed from crates.io due to malicious codeNo scoreproc-macro-encrates.io`proc-macro-en` was removed from crates.io due to malicious codeNo scoretinymembercrates.io`tinymember` was removed from crates.io due to affiliation with malicious codeNo scoreappend-only-veccrates.io`append-only-vec` 0.1.9 was removed from crates.io due to a malicious dependencyNo scorearonenaocrates.io`aronenao` was removed from crates.io due to malicious codeNo scorearrayrefcrates.io`arrayref` 0.3.10 was removed from crates.io due to a malicious dependencyNo scorearonecrates.io`arone` was removed from crates.io due to malicious codeNo scorecap-primitivescrates.ioPaths or symlinks ending in a slash escape the sandbox9.0 Critical- bytecodealliance wasmtimeWasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes8.8 High
- bytecodealliance wasmtimeWasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams6.9 Medium
- n8nn8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool6.3 Medium
- n8nn8n before 1.123.69 Remote Code Execution via Git Node Configuration Values7.7 High
- n8nn8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution6.0 Medium
- n8nn8n before 1.123.69 ReDoS via Filter and Switch Node5.3 Medium
- n8nn8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node5.1 Medium
- n8nn8n before 1.123.69 Arbitrary File Read and Write via Snowflake8.7 High
- n8nn8n before 2.34.1 Authorization Bypass via Custom Role Deletion7.4 High
- n8nn8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution7.2 High
- n8nn8n before 1.123.69 Credential Leak via GraphQL Node Error7.1 High
- n8nn8n before 1.123.69 Expression Injection via Resource Locator8.4 High
- n8nn8n before 1.123.69 SSRF via Edit Image Node6.0 Medium
- n8nn8n before 2.34.1 Cross-Project Credential Access via MCP5.3 Medium
- n8nn8n before 1.123.69 Stored XSS via Form Completion Page8.4 High
- n8nn8n before 1.123.69 PostgREST Filter Injection via Supabase7.1 High
- n8nn8n before 1.123.69 NoSQL Injection via MongoDB Node7.1 High
- n8nn8n before 1.123.69 SSRF Protection Bypass via OAuth22.3 Low
- n8nn8n before 2.34.1 Remote Code Execution via Path Traversal8.7 High
- omnivore-app omnivoreOmnivore Stored Server-Side Request Forgery via the setWebhook Mutation5.3 Medium
- omnivore-app omnivoreOmnivore Server-Side Request Forgery via the scanFeeds GraphQL Query5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreIpa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value6.5 Medium
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreFreeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships9.6 Critical
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read7.5 High
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore8.7 High
- tassos.gr convert forms extension for joomlaJoomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension 1.0.0-4.4.16, 5.0.0-5.2.56.9 Medium
- freeipa, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreIpa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding4.3 Medium
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read7.5 High
- rpm-software-management popt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 morePopt-devel: popt-static: short realloc in poptconfigfiletostring2.5 Low
- gimpGIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreLibvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow7.8 High
- yootheme.com zoo extension for joomlaJoomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.656.9 Medium
container-suseconnectSUSESecurity update for container-suseconnectNo score- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses5.3 Medium
- frauscher sensortechnik fds 102Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authorization due to improper enforcement of role-based access control5.3 Medium
- frauscher sensortechnik fds 102Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is offering files with sensitive information for download without requiring authentication8.7 High
- frauscher sensortechnik fds 102Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Cross-Site Request Forgery due to missing CSFR protection headers8.6 High
- frauscher sensortechnik fds 102Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insufficient Session Expiration due to flawed session expiration logic9.2 Critical
- Show moreLoading…